Privacy Policy
Last updated: 3 September 2026
Cairnbase, Inc., a Delaware corporation ("Cairnbase", "we", "us"), is building institutional-memory software for expedition operations. This policy covers the website at cairnbase.ai. We have tried to keep it short by keeping the data we handle short.
Product data is covered elsewhere
This policy is about the website. If your question is about the software — where an expedition company's documents and site records would live, and who else touches them — write to hello@cairnbase.ai and we will send you the detail, including the subprocessors involved and the parsing of uploaded documents by Anthropic, which cannot be confined to the EU. Cairnbase is not yet a hosted service, so no product data is collected through this website today.
What we collect
This website has no user accounts and sets no cookies. There is one form on it — the early-access form on the home page — and sending that form is the only way the site itself collects anything about you. Everything else here is you choosing to write to us, or the anonymous page counting described below.
- The early-access form. Your email address, which is the only field we insist on. Optionally your name, company, role, where you operate, and a message. We store what you typed and the date you sent it, and nothing is added to it from anywhere else. The form does carry one hidden field: it should always be empty, it exists to catch spam robots, and for a person it never has anything in it.
- Email. If you write to hello@cairnbase.ai instead, we receive your email address and whatever you include in your message.
- Server logs. Our hosting provider (Cloudflare) processes standard technical request data — such as IP address and browser type — to serve the site and protect it from abuse.
- Anonymous page counting. We use Cloudflare Web Analytics to see how many people visit and which pages they read. It sets no cookie, stores nothing on your device, and does not follow you to any other website. What it records for a visit is the page, the country, the browser and operating system, the site you followed a link from if there was one, and how quickly the page loaded. What it cannot do is tell us who you are, or join one of your visits to another. We use it to find out whether anybody is reading this at all, which is a question we would otherwise be guessing at.
- One derived record, for an hour. When you send the form, the IP address you are connecting from is hashed — a one-way scramble that we cannot turn back into the address — and that hash is counted in Cloudflare's edge cache so the same connection cannot fire the form over and over. It is there to stop a flood and nothing else. It never reaches our database, is not joined to what you typed, and expires within the hour.
How we use it
- To reply to you, and — if you asked for early access, by form or by email — to contact you about Cairnbase when there is something worth telling you.
- We do not sell or rent personal data. We do not send marketing on behalf of anyone else. Every update email includes a working way to say "stop".
Where it lives
What you send through the early-access form is stored in Cloudflare D1, a database on our own Cloudflare account. It does not pass through a third-party form service, a mailing-list platform, or a CRM, because we use none. Email to hello@cairnbase.ai is delivered to a Google Workspace mailbox (privacy policy). The website is served by Cloudflare Pages (privacy policy).
How long we keep it
Early-access entries are kept until the early-access programme ends or you ask us to remove yours, whichever comes first — and in no case longer than three years from the day you sent the form. Ordinary correspondence is kept as long as needed to deal with it. Removal is done by hand, by us, on the day we read the request.
Your rights
If you are in the EU, UK, or another jurisdiction with data-protection rights: you may ask us at any time what we hold about you, ask us to correct it, or ask us to delete it. Email hello@cairnbase.ai and we will act on it promptly. You also have the right to complain to your local data-protection authority.
Changes
Two things changed on 31 July 2026, and this page was rewritten before either went live rather than after. The early-access form replaced an email link, and anonymous page counting was switched on. An earlier version of this policy said the site had no forms and no analytics; both sentences are gone because both stopped being true, and the wording above describes what actually happens now. The promise carries on unchanged — if the site starts doing more than the above, an application login say, or anything at all that sets a cookie, this page changes first and the date at the top changes with it.